{"id":25123,"date":"2017-02-06T16:00:00","date_gmt":"2017-02-06T16:00:00","guid":{"rendered":"https:\/\/grapevinemsp.com\/2017\/02\/06\/stolen-usb-drive-gets-insurance-company-2-2-million-hipaa-fine\/"},"modified":"2017-02-06T16:00:00","modified_gmt":"2017-02-06T16:00:00","slug":"stolen-usb-drive-gets-insurance-company-2-2-million-hipaa-fine","status":"publish","type":"post","link":"https:\/\/grapevinemsp.com\/stolen-usb-drive-gets-insurance-company-2-2-million-hipaa-fine\/","title":{"rendered":"Stolen USB Drive Gets Insurance Company $2.2 Million HIPAA Fine"},"content":{"rendered":"

\"\"The Department of Health and Human Services is off to a busy start in 2017, having just levied their second hefty fine for HIPAA violations. In this instance, the company in question was Puerto Rican insurer MAPFRE.<\/p>\n

Back in 2011, MAPFRE had reported an ePHI incident involving a flash drive that was stolen from the company\u2019s IT department, where it had been left in the open and unsecured overnight. The drive contained the names, social security numbers and other protected health information for slightly more than two thousand MAPFRE customers.<\/p>\n

After properly reporting the breach, the company conducted a risk analysis and crafted an action plan designed to prevent such instances from occurring in the future. They presented their plan to OCR, which is the Health Department\u2019s investigative arm, but then failed to implement their new proposed procedures.<\/p>\n

When a follow up investigation revealed that the company had not taken the actions they committed to taking, in order to improve the physical aspect of their data security, OCR levied a staggering $2.2 million fine against them.<\/p>\n

Last year was a record-setting year for the Department of Health and Human Services with thirteen settlements issued, plus a civil monetary penalty case. If January is any indication, the department looks like it\u2019s going to have a busy 2017 as well.<\/p>\n

Once again, the size of the settlement underscores the importance of taking HIPAA regulations seriously, but this particular case also brings to light the importance of taking timely corrective action. In this instance, MAPFRE did everything right except for the last step, when they failed to actually implement the changes they had committed to making. That proved to be a costly mistake. If your business deals with protected health information in any capacity, be sure it\u2019s not one you repeat. Doing so could be far more costly than you realize!<\/p>\n","protected":false},"excerpt":{"rendered":"

The Department of Health and Human Services is off to a busy start in 2017, having just levied their second hefty fine for HIPAA violations. In this instance, the company in question was Puerto Rican insurer MAPFRE. Back in 2011, MAPFRE had reported an ePHI incident involving a flash drive that was stolen from the […]<\/p>\n","protected":false},"author":5,"featured_media":25124,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[30],"yoast_head":"\nStolen USB Drive Gets Insurance Company $2.2 Million HIPAA Fine<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/grapevinemsp.com\/stolen-usb-drive-gets-insurance-company-2-2-million-hipaa-fine\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Stolen USB Drive Gets Insurance Company $2.2 Million HIPAA Fine\" \/>\n<meta property=\"og:description\" content=\"The Department of Health and Human Services is off to a busy start in 2017, having just levied their second hefty fine for HIPAA violations. In this instance, the company in question was Puerto Rican insurer MAPFRE. Back in 2011, MAPFRE had reported an ePHI incident involving a flash drive that was stolen from the […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/grapevinemsp.com\/stolen-usb-drive-gets-insurance-company-2-2-million-hipaa-fine\/\" \/>\n<meta property=\"og:site_name\" content=\"The Valley\u2019s Leading IT Company I Grapevine MSP\" \/>\n<meta property=\"article:published_time\" content=\"2017-02-06T16:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2017\/02\/Stolen.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"300\" \/>\n\t<meta property=\"og:image:height\" content=\"225\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Cloudways\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Cloudways\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\/\/grapevinemsp.com\/stolen-usb-drive-gets-insurance-company-2-2-million-hipaa-fine\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/grapevinemsp.com\/stolen-usb-drive-gets-insurance-company-2-2-million-hipaa-fine\/\"},\"author\":{\"name\":\"Cloudways\",\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/person\/bd59bb9722808d3e8b3339137e9e3828\"},\"headline\":\"Stolen USB Drive Gets Insurance Company $2.2 Million HIPAA Fine\",\"datePublished\":\"2017-02-06T16:00:00+00:00\",\"dateModified\":\"2017-02-06T16:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/grapevinemsp.com\/stolen-usb-drive-gets-insurance-company-2-2-million-hipaa-fine\/\"},\"wordCount\":317,\"publisher\":{\"@id\":\"https:\/\/grapevinemsp.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/grapevinemsp.com\/stolen-usb-drive-gets-insurance-company-2-2-million-hipaa-fine\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2017\/02\/Stolen.jpg\",\"keywords\":[\"Security\"],\"articleSection\":[\"News\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/grapevinemsp.com\/stolen-usb-drive-gets-insurance-company-2-2-million-hipaa-fine\/\",\"url\":\"https:\/\/grapevinemsp.com\/stolen-usb-drive-gets-insurance-company-2-2-million-hipaa-fine\/\",\"name\":\"Stolen USB Drive Gets Insurance Company $2.2 Million HIPAA Fine\",\"isPartOf\":{\"@id\":\"https:\/\/grapevinemsp.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/grapevinemsp.com\/stolen-usb-drive-gets-insurance-company-2-2-million-hipaa-fine\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/grapevinemsp.com\/stolen-usb-drive-gets-insurance-company-2-2-million-hipaa-fine\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2017\/02\/Stolen.jpg\",\"datePublished\":\"2017-02-06T16:00:00+00:00\",\"dateModified\":\"2017-02-06T16:00:00+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/grapevinemsp.com\/stolen-usb-drive-gets-insurance-company-2-2-million-hipaa-fine\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/grapevinemsp.com\/stolen-usb-drive-gets-insurance-company-2-2-million-hipaa-fine\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/grapevinemsp.com\/stolen-usb-drive-gets-insurance-company-2-2-million-hipaa-fine\/#primaryimage\",\"url\":\"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2017\/02\/Stolen.jpg\",\"contentUrl\":\"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2017\/02\/Stolen.jpg\",\"width\":300,\"height\":225,\"caption\":\"Stolen\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/grapevinemsp.com\/stolen-usb-drive-gets-insurance-company-2-2-million-hipaa-fine\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/grapevinemsp.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Stolen USB Drive Gets Insurance Company $2.2 Million HIPAA Fine\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/grapevinemsp.com\/#website\",\"url\":\"https:\/\/grapevinemsp.com\/\",\"name\":\"The Valley\u2019s Leading IT Company I Grapevine MSP\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/grapevinemsp.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/grapevinemsp.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/grapevinemsp.com\/#organization\",\"name\":\"Grapevine MSP\",\"url\":\"https:\/\/grapevinemsp.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2021\/09\/logo2850605_lg.jpg\",\"contentUrl\":\"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2021\/09\/logo2850605_lg.jpg\",\"width\":600,\"height\":159,\"caption\":\"Grapevine MSP\"},\"image\":{\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/person\/bd59bb9722808d3e8b3339137e9e3828\",\"name\":\"Cloudways\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/9c73104e6f4801624afa01bbc4c96758?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/9c73104e6f4801624afa01bbc4c96758?s=96&d=mm&r=g\",\"caption\":\"Cloudways\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Stolen USB Drive Gets Insurance Company $2.2 Million HIPAA Fine","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/grapevinemsp.com\/stolen-usb-drive-gets-insurance-company-2-2-million-hipaa-fine\/","og_locale":"en_US","og_type":"article","og_title":"Stolen USB Drive Gets Insurance Company $2.2 Million HIPAA Fine","og_description":"The Department of Health and Human Services is off to a busy start in 2017, having just levied their second hefty fine for HIPAA violations. In this instance, the company in question was Puerto Rican insurer MAPFRE. Back in 2011, MAPFRE had reported an ePHI incident involving a flash drive that was stolen from the […]","og_url":"https:\/\/grapevinemsp.com\/stolen-usb-drive-gets-insurance-company-2-2-million-hipaa-fine\/","og_site_name":"The Valley\u2019s Leading IT Company I Grapevine MSP","article_published_time":"2017-02-06T16:00:00+00:00","og_image":[{"width":300,"height":225,"url":"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2017\/02\/Stolen.jpg","type":"image\/jpeg"}],"author":"Cloudways","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Cloudways","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/grapevinemsp.com\/stolen-usb-drive-gets-insurance-company-2-2-million-hipaa-fine\/#article","isPartOf":{"@id":"https:\/\/grapevinemsp.com\/stolen-usb-drive-gets-insurance-company-2-2-million-hipaa-fine\/"},"author":{"name":"Cloudways","@id":"https:\/\/grapevinemsp.com\/#\/schema\/person\/bd59bb9722808d3e8b3339137e9e3828"},"headline":"Stolen USB Drive Gets Insurance Company $2.2 Million HIPAA Fine","datePublished":"2017-02-06T16:00:00+00:00","dateModified":"2017-02-06T16:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/grapevinemsp.com\/stolen-usb-drive-gets-insurance-company-2-2-million-hipaa-fine\/"},"wordCount":317,"publisher":{"@id":"https:\/\/grapevinemsp.com\/#organization"},"image":{"@id":"https:\/\/grapevinemsp.com\/stolen-usb-drive-gets-insurance-company-2-2-million-hipaa-fine\/#primaryimage"},"thumbnailUrl":"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2017\/02\/Stolen.jpg","keywords":["Security"],"articleSection":["News"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/grapevinemsp.com\/stolen-usb-drive-gets-insurance-company-2-2-million-hipaa-fine\/","url":"https:\/\/grapevinemsp.com\/stolen-usb-drive-gets-insurance-company-2-2-million-hipaa-fine\/","name":"Stolen USB Drive Gets Insurance Company $2.2 Million HIPAA Fine","isPartOf":{"@id":"https:\/\/grapevinemsp.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/grapevinemsp.com\/stolen-usb-drive-gets-insurance-company-2-2-million-hipaa-fine\/#primaryimage"},"image":{"@id":"https:\/\/grapevinemsp.com\/stolen-usb-drive-gets-insurance-company-2-2-million-hipaa-fine\/#primaryimage"},"thumbnailUrl":"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2017\/02\/Stolen.jpg","datePublished":"2017-02-06T16:00:00+00:00","dateModified":"2017-02-06T16:00:00+00:00","breadcrumb":{"@id":"https:\/\/grapevinemsp.com\/stolen-usb-drive-gets-insurance-company-2-2-million-hipaa-fine\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/grapevinemsp.com\/stolen-usb-drive-gets-insurance-company-2-2-million-hipaa-fine\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/grapevinemsp.com\/stolen-usb-drive-gets-insurance-company-2-2-million-hipaa-fine\/#primaryimage","url":"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2017\/02\/Stolen.jpg","contentUrl":"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2017\/02\/Stolen.jpg","width":300,"height":225,"caption":"Stolen"},{"@type":"BreadcrumbList","@id":"https:\/\/grapevinemsp.com\/stolen-usb-drive-gets-insurance-company-2-2-million-hipaa-fine\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/grapevinemsp.com\/"},{"@type":"ListItem","position":2,"name":"Stolen USB Drive Gets Insurance Company $2.2 Million HIPAA Fine"}]},{"@type":"WebSite","@id":"https:\/\/grapevinemsp.com\/#website","url":"https:\/\/grapevinemsp.com\/","name":"The Valley\u2019s Leading IT Company I Grapevine MSP","description":"","publisher":{"@id":"https:\/\/grapevinemsp.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/grapevinemsp.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/grapevinemsp.com\/#organization","name":"Grapevine MSP","url":"https:\/\/grapevinemsp.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/grapevinemsp.com\/#\/schema\/logo\/image\/","url":"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2021\/09\/logo2850605_lg.jpg","contentUrl":"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2021\/09\/logo2850605_lg.jpg","width":600,"height":159,"caption":"Grapevine MSP"},"image":{"@id":"https:\/\/grapevinemsp.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/grapevinemsp.com\/#\/schema\/person\/bd59bb9722808d3e8b3339137e9e3828","name":"Cloudways","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/grapevinemsp.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/9c73104e6f4801624afa01bbc4c96758?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9c73104e6f4801624afa01bbc4c96758?s=96&d=mm&r=g","caption":"Cloudways"}}]}},"_links":{"self":[{"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/posts\/25123"}],"collection":[{"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/comments?post=25123"}],"version-history":[{"count":0,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/posts\/25123\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/media\/25124"}],"wp:attachment":[{"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/media?parent=25123"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/categories?post=25123"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/tags?post=25123"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}